Fixed path disclosure due to Null-Byte (%00) attack at the URI
Details: http://www.exploit-db.com/exploits/17108/